uniapp-native-app
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation repository for native app packaging. All identified links (e.g., to
nativesupport.dcloud.net.cn) are official resources for the uni-app framework. - [COMMAND_EXECUTION]: The skill includes a standard
keytoolcommand inexamples/android/keystore.mdfor generating Android keystores. This is a routine developer task and does not involve hardcoded secrets or unsafe redirections. - [INDIRECT_PROMPT_INJECTION]: While the skill interacts with user requests to provide packaging guidance, it does not ingest external untrusted data or execute commands based on user-provided strings in an unsafe manner. The attack surface for indirect injection is negligible.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths were found. The skill correctly instructs users to generate their own signing certificates and keystores.
Audit Metadata